REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 6e380b8d-0c0f-4649-98a2-fd0b9891077f
2026-05-04T16:58:08.786Z
143.20.37.62
SPOOFED BOT
BOT DETECTION RESULT
STATUS: SPOOFED BOT
CONFIDENCE: 100%
OPERATOR: freakhosting.com
BOT NAME: OAI-SearchBot
TYPE: Spoofed Bot
UA CLAIM: OAI-SearchBot | CLOUDFLARE VERIFIED: no
WHY SPOOFED BOT:
- claims to be OAI-SearchBot - not verified by Cloudflare
REQUEST INFO
ID: 6e380b8d-0c0f-4649-98a2-fd0b9891077f
TIME: 2026-05-04T16:58:08.786Z
METHOD: GET
URL: https://header-analyzer.franzai.com/
PATH: /
HEADERS (10)
accept-encoding: gzip, br
cf-connecting-ip: 143.20.37.62
cf-ipcountry: DE
cf-ray: 9f690c6c2afd89d8
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)
x-forwarded-proto: https
x-real-ip: 143.20.37.62
NETWORK
IP: 143.20.37.62
TLS: TLSv1.3
PROTOCOL: HTTP/1.1
LOCATION
COUNTRY: DE
CITY: Frankfurt am Main
ASN: 215703
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 100%
Confidence: 100%
Identified as: freakhosting.com OAI-SearchBot
Suspicious Indicators
- claims to be OAI-SearchBot - not verified by Cloudflare
User Agent
Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)
Raw JSON Data
{
"id": "6e380b8d-0c0f-4649-98a2-fd0b9891077f",
"timestamp": "2026-05-04T16:58:08.786Z",
"timestampMs": 1777913888786,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/",
"path": "/",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept-encoding": "gzip, br",
"cf-connecting-ip": "143.20.37.62",
"cf-ipcountry": "DE",
"cf-ray": "9f690c6c2afd89d8",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)",
"x-forwarded-proto": "https",
"x-real-ip": "143.20.37.62"
},
"cookies": {},
"query": {},
"network": {
"ip": "143.20.37.62",
"country": "DE",
"city": "Frankfurt am Main",
"asn": 215703
},
"geo": {
"country": "DE",
"city": "Frankfurt am Main",
"asn": 215703,
"colo": "FRA"
},
"bot": {
"isBot": true,
"probableBot": false,
"confidence": 100,
"suspiciousScore": 100,
"spoofed": true,
"uaVerified": false,
"uaClaim": "OAI-SearchBot",
"botName": "OAI-SearchBot",
"operator": "freakhosting.com",
"operatorSource": "cf-as-org",
"type": "Spoofed Bot",
"ruleId": "openai-searchbot",
"detectionReason": "claims to be OAI-SearchBot - not verified by Cloudflare",
"reasons": [
"claims to be OAI-SearchBot - not verified by Cloudflare"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/1.1",
"clientAcceptEncoding": "gzip",
"requestPriority": "",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": {},
"clientTcpRtt": 2,
"clientQuicRtt": 0,
"colo": "FRA",
"asn": 215703,
"asOrganization": "freakhosting.com",
"country": "DE",
"isEUCountry": "1",
"city": "Frankfurt am Main",
"continent": "EU",
"region": "Hesse",
"regionCode": "HE",
"timezone": "Europe/Berlin",
"longitude": "8.68417",
"latitude": "50.11552",
"postalCode": "60306",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES128-GCM-SHA256",
"tlsClientRandom": "Qd8jX1GkbWSzeuvesNhO6GQwGu2qjKX+ulFhT+9TLYA=",
"tlsClientCiphersSha1": "cS2l8j12GPBEw+RsoEjwsaNKpx8=",
"tlsClientExtensionsSha1": "l3/hnilBcqxaD0e8H0fM4mdcRJw=",
"tlsClientExtensionsSha1Le": "IqMhtDDF0AsOFpLzsL57tTwKmWg=",
"tlsExportedAuthenticator": {
"clientHandshake": "fdb007c6ccd935909018f90d3f295fc031a5a3bf9ee28c1893642a239e95f9e3",
"serverHandshake": "93c2a4851d266f82d92f563ab99c0293ffc9e6a81ac715498510f12cb2268ee4",
"clientFinished": "5fb6104b9e884a34737d30797ccf42e3da61c82c0f7e6d5b86a613b4910e17fb",
"serverFinished": "72cfd231a4b5324a5977c7f3f5e17cf9ad5bb7e49b5b11067818f01b98b68385"
},
"tlsClientHelloLength": "260",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 922678
}
},
"jsData": null
}